Hacker claims millions of records stolen from corporate Azure tenants

Hacker claims to have stolen millions of Azure customer records from McDonald’s, Vodafone, Kyndryl, and others – here's what we know so far

A hacker is advertising data allegedly stolen from an array of companies including McDonald's, Vodafone, Kyndryl, and more. Researchers at HudsonRock said that the criminal, known as TheHatman, downloaded the databases directly from the organizations’ Azure or Entra portals, claiming to have done so through the use of compromised credentials.Other victims include HCL Technologies, IHG Hotels & Resorts, Gap, Hexaware Technologies, and Wyndham Hot…

Hacker claims millions of records stolen from corporate Azure tenants

A threat actor known as “TheHatman” claims to have obtained millions of employee records from the Azure environments of several Fortune 500 companies, including McDonald’s, Vodafone, Kyndryl, and Tata Consultancy Services (TCS), according to Hudson Rock. Over the past week, the threat actor has posted a string of large internal employee directories on cybercrime forums, claiming that each was pulled directly from the victim organization’s Azure …

Hacker offers millions of corporate employee records allegedly stolen from cloud tenants

Listings reportedly span nine firms and expose directory details that could enable phishing, impersonation, and privileged-account attacks A threat actor using the alias “TheHatman” is offering millions of employee and account records allegedly taken from Microsoft Azure and Entra ID environments belonging to several large firms. The campaign reportedly affects McDonald’s, Tata Consultancy Services (TCS), Vodafone, HCL Technologies, InterContine…